File _patchinfo of Package patchinfo.8723
<patchinfo incident="8723"> <issue tracker="bnc" id="1085276">VUL-0: CVE-2018-7750: python-paramiko: transport.py in the SSH server implementation does not properly check whether authentication is completed before processing other requests</issue> <issue tracker="bnc" id="1106148">L3: bug in python-paramiko-1.15.2-2.3.2.noarch</issue> <issue tracker="cve" id="2018-7750"/> <category>security</category> <rating>important</rating> <packager>glaubitz</packager> <description>This update for python-paramiko to version 1.18.5 fixes the following issues: This security issue was fixed: - CVE-2018-7750: transport.py in the SSH server implementation of Paramiko did not properly check whether authentication is completed processing other requests. A customized SSH client could have skipped the authentication step (bsc#1085276) This non-security issue was fixed: - Prevent connection problems with ssh servers due to no acceptable macs being available (bsc#1106148) For additional changes please check the changelog. </description> <summary>Security update for python-paramiko</summary> </patchinfo>